Referer

jamesm87

Hi,

I have File A on Server 1.1.1.1
I have File B on Server 2.2.2.2

If File A was to automatically submit a form to File B, how can File B determine it was From File A and not a malicious user trying to hack the system?

Thanks in advance 🙂

James P-M

AstroTeg

Might recommend looking into using public and private keys. Then you'd pass a hash from server A to server B. If server B can recreate a matching hash (based on a collection of criteria that server A and only server A knows about) then server B could safely assume server A is who it says it is. This is a really really simple explanation of it (which is liable to being incorrect too). Its not the only solution, but it should fit pretty well.

jamesm87

Originally posted by AstroTeg
Might recommend looking into using public and private keys. Then you'd pass a hash from server A to server B. If server B can recreate a matching hash (based on a collection of criteria that server A and only server A knows about) then server B could safely assume server A is who it says it is. This is a really really simple explanation of it (which is liable to being incorrect too). Its not the only solution, but it should fit pretty well.

Hi,

Great idea. So you mean something like MD5 a domain and username and put the together, and check they match for example.

Nice idea 🙂

planetsim

Originally posted by AstroTeg
Might recommend looking into using public and private keys. Then you'd pass a hash from server A to server B. If server B can recreate a matching hash (based on a collection of criteria that server A and only server A knows about) then server B could safely assume server A is who it says it is. This is a really really simple explanation of it (which is liable to being incorrect too). Its not the only solution, but it should fit pretty well.

Not a bad idea probably a good one and id suggest use it but you can do that + do a HTTP_REFERER im not sure there will be a referrer in this case but a little trial and error will work. If it does than maybe use the Private/Public Keys make sure they match and also for a little bit higher just check on the referrer (not that its higher than Keys as the referrer can be spoofed but both cant.)